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DETAILED ACTION 



Response to Amendment 

Claims 1-27 are pending examination . 



Response to Arguments 

I. In view of the Appeal Brief filed on 3/19/2007, PROSECUTION IS HEREBY 
REOPENED . 

To avoid abandonment of the application, appellant must exercise one of the following 
two options: 

(1) file a reply under 37 CFR 1.111 (if this Office action is a non-final) or a reply under 37 CFR 1.113 (if this 
Office action is final); or, 

(2) request reinstatement of the appeal. 

If reinstatement of the appeal is requested, such request must be accompanied by a 
supplemental appeal brief, but no new amendment, affidavits (37 CFR 1.130, 1.131 or 1.132) or 
other evidence are permitted. See 37 CFR 1.193(b)(2). 

II. Applicant's arguments with respect to claims 1-27 have been considered but are moot in 
view of the new ground(s) of rejection. 

35 USC §112 -Withdrawn 

III. Regarding Claims 1, 12 and 22: Applicant's arguments have been considered, therefore 
the 35 U.S.C. 1 12, second paragraph rejection of the above claims has been withdrawn. 
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Specification 

IV. Applicant's disclosure (see page 12) is objected to because it contains an active 
embedded hyperlink and/or other form of browser-executable code. Applicant is required to 
delete the embedded hyperlink and/or other form of browser-executable code. See MPEP § 
608.01. Appropriate correction of any and all instances of informalities is required. 

Claim Rejections - 35 USC § 101 

V. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or 
any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 

VL Claims 12 - 21 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. 

Claims 12-21 recite "A computer program product" and "computer readable code 
means" which are directed to software, per se, and are thus non-statutory unless computer- 
implemented on a computer-readable medium. 

Claim Rejections - 35 USC § 112 

VII. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

VIII. Claim 9 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite for 
failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 

Claim 9 recites the limitation "all filtering" in line 1 of the claim. There is insufficient 
antecedent basis for this limitation in the claim. 
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Claim Rejections - 35 USC § 102 

IX. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(a) the invention was known or used by others in this country, or patented or described in a printed publication in this 
or a foreign country, before the invention thereof by the applicant for a patent 

X. Claims 7, 8, 18 and 19 are rejected under 35 U.S.C. 102(a) as being anticipated by 
Kunzelman et al (US 6,041,357). 

a. Referring to claim 7, Kunzelman et al teaches a method of routing a request by 
an end user device to a particular one of a plurality of redundant servers residing behind a 
network dispatching mechanism, said methods comprising the steps of: 

• receiving, at the network dispatching mechanism, a request for information 
indicated by a uniform resource locator (URL) {col 5 lines 38-42); 

• determining, at the network dispatching mechanism, if said URL contains a valid 
routing token (col. 5 lines 60-65); 

• if said URL contains a valid routing token, further determining, at the network 
dispatching mechanism, if a session binding indicated by said routing token is old 
(col. 6 lines 22-32); 

• if said URL contains a valid routing token and said routing token is not old, 
forwarding, by said network dispatching mechanism, the request, including the 
URL, to the particular server indicated by said valid routing token (col. 6 lines 43- 
57); 

• removing, by said particular server, said valid routing information from the URL 
(col 6 lines 43-57— parsing URL for session data); 

• storing, by said particular server, said routing information removed from said 
valid routing token, where said valid routing information can be accessed 
subsequently by an outbound data stream filter during the processing of an 
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outbound reply related to said request (col. 7 lines 59-67 — caching and storing 
data for further access); 

• accessing, by said particular server, a server-side storage location where 
information regarding a session between the particular server and the end user 
device is stored (col. 5 lines 38-62, col 7 lines 59-67); and 

• inserting, by said particular server, said session information into said request 
(col. 6 lines 43-52). 

b. Claim 18 contains limitations that are substantially equivalent to claim 7 and is 
therefore rejected under the same basis. 

c. Per claim 8, Kunzelman et al teach the method as claimed in claim 7 wherein 
additional filtering of the URL is done prior to the forwarding step (col 5 line 38-col6line 12). 

d. Claim 19 is substantially equivalent to claim 8 and is therefore rejected under the 
same basis. 



Claim Rejections - 35 USC § 103 

XI. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

XIL Claims 1-3, 5, 6, 9, 12-14, 16, 22-24 and 22-27 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Brendel (US 6,772,333) in view of Kunzelman et al (US 
6,041,357). 

e. Referring to claim 1, Brendel teach es a method of establishing a persistent 
relationship between an end user device and a server where the server is one of a plurality of 
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servers managed by a dispatcher and the end user device accesses the server using a uniform 
resource locator (URL), the method comprising the steps of: 

• receiving at the dispatcher, a request for information from the end user device 
(Abstract, col. 3 lines 7-75); 

• determining by the dispatcher, which of the plurality of server to select for 
satisfying the request (Abstract, figure 2, col. 2 lines 18-67, col.4 line 63-coL5 line 
2, col 5 lines 46-67 — load balancer determines which server to receive the 
request); 

• creating, at the selected server, a token comprising at least an identifier for the 
selected server, a date/time stamp, and a key, said key for accessing a server-side 
storage area for information regarding the persistent relationship at the end user 
device (Abstract, col. 6 lines 8-38, col. 7 lines 31-67, col.8 lines 16-42, col. 9 lines 
10-12, col. 11 line 66-coll2 line 2 — the server selected from the server farm 
creates a cookie and SSL session ID; the cookie has a server ID and SSL session 
ID has times tamp for expiration and key); and 

• sending, by the selected server to the client device, a response with the token 
(colli lines 14-34, col. 12 lines 30-62). 

Although Brendel teaches embedding the SSL component into a webpage (col. 12 
lines 30-62), Brendel fails to explicitly teach a token comprising at least an identifier for the 
selected server, a date/time stamp, and a key, said key for accessing a server-side storage area for 
information regarding the persistent relationship at the end user device and inserting the token 
into the URL. However, Kunzelman et al teach a client's selected server sending tokens 
embedded in URL requests and responding to the client with a token embedded in the URL, 
wherein the token elements comprise a server node identifier, a unique session identifier, 
timestamp, expiration, user ID, and digital signature (col 3 lines 54-65, col 4 lines 29-49, col 6 
lines 43-52). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Brendel with Kunzelman et al by embedding a 
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token into a URL in order to a server to associate a token with a particular URL and 
'track/monitor the user's activity on a particular website — such tracking methods are well-known 
in the art. 

f. Claims 12 and 22 contain limitations that are substantially equivalent to claim 1 
and are therefore rejected under the same basis. 

g. Per claim 2, Brendel with Kunzelman et al teach the method as claimed in claim 
1 wherein said token is encoded using a modified Base64 encoding {Kunzelman et al—col.6 lines 
58-67). It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to encode a token in a modified Base64 because modified Base64 is a standard 
encoding technique used for MIME email documents. 

h. Claims 13 and 23 are substantially equivalent to claim 2 and are therefore 
rejected under the same basis. 

i. Per claim 3, Brendel with Kunzelman et al teach the method as claimed in claim 
1 wherein said token has a checksum or hash verification field {Brendel — col.7 lines 25-31, 
Kunzelman et al — col. 7 lines 5-15). 

j. Claims 14 and 24 are substantially equivalent to claim 3 and are therefore 
rejected under the same basis. 

k. Per claim 5, Brendel with Kunzelman et al teach the method as claimed in claim 
3 wherein said checksum or hash is encoded using a modified Base64 encoding {Kunzelman et 
al: col.6 line 58-col 7 line 25). It would have been obvious to one of ordinary skill in the art at 
the time the invention was made to encode a token in a modified Base64 because modified 
Base64 is a standard encoding technique used for MIME email documents. 
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1. Claims 16 and 26 are substantially equivalent to claim 5 and are therefore 
rejected under the same basis. 

m. Per claim 6, Brendel with Kunzelman et al teach the method as claimed in claim 
1 wherein said information regarding said persistent relationship is stored as a cookie on said 
server {Brendel — coL3 lines 7-56, col. 6 lines 1-38, col.8 lines 32-67, col, 13 lines 19-31). 

n. Claim 27 is substantially equivalent to claim 6 and is therefore rejected under the 
same basis. 

o. Per claim 9, Brendel with Kunzelman et al teach the method as claimed in claim 
1 wherein all filtering is performed within the dispatcher {Brendel — col 5 line 53-col6 line 7, 
Kunzelman et al — col 5 line 38-col6 line 12). 

XIII. Claims 4, 15 and 25 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Brendel (US 6,772,333) in view of Kunzelman et al (US 6,041,357) in further view of 
Schmeidler et al (US 6,763,370). 

p. Per claim 4, Brendel with Kunzelman et al teach the method as claimed in claim 
3, yet fail to further explicitly teach the method as claimed in claim 3 wherein said hash is a 
SHA-1 hash computed over said identifier for said selected server, said date/time stamp, and said 
key. However Schmeidler et al teach using hashing functions to encrypt session information 
related to a user and server {col 18 lines 37-49, col 30 lines 27-32). It would have been obvious 
to one of ordinary skill in the art at the time the invention was made to combine the teachings of 
Brendel and Kunzelman et al with Schmeidler et al for using hashing functions to encrypt the 
session token data. Using hashing functions for encryption are well-known in the art for securing 
the integrity of the transmitted data. 
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q. Claims 15 and 25 are substantially equivalent to claim 4 and are therefore 
rejected under the same basis. 



XIV. Claims 10, 11, 17, 20 and 21 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over to Gupta et al (US 6,763,468) in view of Kunzelman et al (US 
6,041,357). 

r. Referring to claim 10, Gupta et al teach a method of sending information to a 
requesting end user from an application over a session wherein said application resides at one of 
a plurality of redundant servers, said method comprising the steps of: 

• receiving response information from said application, said response information 
including a URL (uniform resource locator) {col 12 lines 10-14); 

• determining if a server-side key cookie has been used for storing session 
information between said end user and said application (colli lines 57-66, col 12 
lines 3-8 — determining if a server-side access cookie has been used); 

• if a server-side key cookie has been used for storing session information, 
retrieving a session key from said key cookie (col 12 lines 3-8 and 44-55 — 
retrieving access session cookies); 

• if a key cookie was not used for storing session information, retrieving said 
session key from a control block (col 12 lines 8-18); 

• storing said removed cookies in a predetermined server-side storage area (col 6 
lines 28-31 \ col 12 lines 48-55, col 13 lines 13-17 — cookies are stored and 
maintained at the server); and 

• creating a sticky routing string (col 12 lines 10-18, col 13 lines 13-21 and 40-45), 
Gupta et al teach updating cached session information and forwarding the 

updated session information to the server (col. 13 lines 13-21), yet Gupta et al fail to explicitly 
teach removing all cookies from said response information; updating said URL to indicate the 
removal of said cookies; updating a date/time stamp in said sticky routing string; inserting said 
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sticky routing string into said URL; and transmitting said response information, including said 
URL, to said end user. However, Kunzelman et al teach the insertion of session tokens within 
URLs, wherein when a session migrates from one server to another, parsing session information 
and storing the session information, and updating session information by forming a new URL 
generated for the session token wherein the session token as part of the URL is returned to the 
user {col 3 lines 54-65, col. 4 lines 29-38, col. 5 line 49-col6 line 33, col 6 lines 43-52), 

Therefore it would have been obvious to one of ordinary skill in the art at the time 
the invention was made to combine the teachings of Gupta et al with Kunzelman et al for having 
a predetermined server-side storage for storing the cookies related to the user and the user's 
session, because this allows a user to later access a server and continue a previous session based 
off of the stored session information and by having a server-side key cookie because this allows 
the user to utilize multiple client devices in the same client-server session. Furthermore, it would 
have been obvious to insert the "sticky routing string" or token the URL in order to a server to 
associate a token with a particular URL and track/monitor the user's activity on a particular 
website — such tracking methods are well-known in the art. 

s. Claims 17 and 20 contain limitations that are substantially equivalent to claim 10 
and is therefore rejected under the same basis. 

t. Per claim 11, Gupta et al with Kunzelman et al teach the method as claimed in 
claim 10 wherein, prior to said determining step, said response information is transmitted from 
said application through one or more filters {Gupta et al— Abstract, col. 7 lines 1-23, col 12 lines 
3-67; Kunzelman et al — col 5 line 38-col6 line 12), 
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u. Claim 21 is substantially equivalent to claim 11 and is therefore rejected under 
the same basis. 

Conclusion 

XV. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure: US 7 5 058 5 600; US 6,611,498; US 7,225,249 and US 6,892,307. 

XVI. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Kristie D. Shingles whose telephone number is 571-272-3888. The 
examiner can normally be reached on Monday 8:00am-5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Rupal Dharia can be reached on 571-272-3880. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 

Application Information Retrieval (PAIR) system. Status information for published applications 

may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 

applications is available through Private PAIR only. For more information about the PAIR 

system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 

system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Kristie D. Shingles 

Examiner 

Art Unit 2141 
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